VAULT / SCOPED ACCESS

The right files.
Nothing else.

A shared link and its passcode open one folder. They never grant operator access.